infrashield

Building a Modular Kubernetes Deception Tool [kube-coy]

A deep dive into building lightweight Kubernetes deception scenarios for defenders — one YAML at a time.

Aug 30, 20266 min read

TRACE — Enterprise Risk Closure Framework

A structured loop for moving from alert closure to risk closure in enterprise SOC operations. Applies to findings closed as false positives, expected activity, or benign behaviour where the underlying

Aug 16, 20264 min read

Building a Threat Hunting Agent from Scratch — What Broke, and Why It Matters

With the recent surge of AI and Supply chain incidents in news, I was looking for a way to build something that updates me about any significant news about such instances. However like we know Most Se

Apr 28, 20265 min read

Adding ReAct to My AI Security Agent — What Changed

Introduction Pre-read : week1 : https://mavericksec.hashnode.dev/building-a-simple-ai-log-analyzer-in-python-what-i-learned-from-the-bugs Week 1 focused on building a basic AI forensic sensor that cou

Mar 15, 20267 min read

Building a Simple AI Log Analyzer in Python — What I Learned from the Bugs

LLMs are starting to appear everywhere in security tooling. Almost every modern platform now claims to offer “AI-powered detection,” “AI SOC analysts,” or automated investigation capabilities. But mos

Mar 13, 20265 min read

Supply Chain Cybersecurity: Effective Incident Response Guide

Introduction Over the past few years, software supply-chain attacks have become one of the most disruptive and damaging trends in cybersecurity. Instead of directly targeting hardened corporate networ

Oct 2, 20259 min read

Where Detection Engineering Meets Data and ML: A Blueprint for Modern Threat Detection

In an era where cyber threats are more evasive, automated, and persistent than ever, relying solely on traditional detection methods just doesn't cut it. As defenders, we’re expected to outsmart threa

Apr 11, 20254 min read

Command Palette

Latest articles